$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa File: b12175cf-2702-3731-83e8-14996dac56a9.roa (raw, json) Hash identifier: h3WWz4dRHzDW8EQYs03wCE9BOyDMsSzr6AEB+1nga64= Subject key identifier: 83:46:57:08:E3:34:22:06:AB:96:A5:DE:DE:5F:8F:EF:49:10:3B:27 Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea Certificate serial: 010D0C9F4328584EC7A1D964AC5E8BEB173EE3E0 Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa Signing time: Sun 09 Aug 2026 13:00:12 +0000 ROA not before: Sun 09 Aug 2026 13:00:12 +0000 ROA not after: Sat 07 Nov 2026 14:00:12 +0000 asID: 8069 IP address blocks: 20.33.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c7:a1:d9:64:ac:5e:8b:eb:17:3e:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea Validity Not Before: Aug 9 13:00:12 2026 GMT Not After : Nov 7 14:00:12 2026 GMT Subject: CN=b5792301-05cf-49ed-8447-66c70516d58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b6:65:d9:52:bf:c1:4e:3f:56:ee:c1:02:55: 84:8a:df:af:19:6b:6a:a4:b9:c1:62:02:ed:38:bc: 97:56:db:f8:ed:54:dc:0c:be:33:b9:d3:ca:7b:a6: ac:a5:8b:5e:9c:93:04:41:37:2e:1c:78:0c:fb:09: bc:2e:3b:20:6d:4d:7b:e4:23:38:42:01:75:d7:fd: d8:3f:f5:12:be:b5:fd:2f:0c:8a:95:f0:5a:fa:a4: a8:ab:68:60:7e:b8:3e:e5:35:da:db:f2:92:19:f9: f8:ba:29:95:e5:df:f1:32:b7:ff:f4:94:78:96:b5: 9b:4b:e2:13:9a:46:e0:19:c6:35:a7:e4:ea:b4:6b: eb:f1:ae:b1:22:55:69:bd:d0:a2:a0:ed:5d:f5:b6: 8d:c4:56:dd:89:5a:2a:74:9e:58:f6:82:23:5e:92: 6e:78:47:49:09:cb:e6:97:6d:37:e3:32:b1:6f:2f: cb:c8:bd:7d:e4:b4:3f:07:8b:dc:d3:5f:1b:a5:27: 94:61:7f:5c:ee:c7:66:67:0b:66:3f:f9:42:4b:93: b7:0e:2b:5a:6f:82:39:f6:d0:ae:7c:ef:65:f1:68: fe:17:44:e6:53:78:b4:b4:4f:46:b7:bf:48:7a:ad: 87:e0:20:f8:97:1e:69:04:af:0d:6b:15:ae:c9:4c: 2c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:46:57:08:E3:34:22:06:AB:96:A5:DE:DE:5F:8F:EF:49:10:3B:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/b12175cf-2702-3731-83e8-14996dac56a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl X509v3 Authority Key Identifier: keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer sbgp-ipAddrBlock: critical IPv4: 20.33.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c5:0f:26:b2:b8:8e:83:04:f5:d4:f5:10:4d:4f:07:3c:70: d1:43:3d:89:44:46:82:d0:30:7d:aa:46:90:b2:16:6b:f1:aa: 9b:e9:1e:98:30:e6:e7:d9:af:a5:59:8a:d9:82:38:23:11:58: 38:2c:74:30:d5:08:a3:cd:4d:82:36:79:e1:94:c4:74:4d:7d: 5d:b7:55:91:40:4e:b0:cd:44:2a:5a:fa:1a:d5:4b:bb:f9:19: e5:68:29:50:f7:1f:95:21:d5:01:a0:5d:81:fa:c3:cc:8c:5d: bc:d4:cc:7b:09:d6:f5:57:41:d1:f5:70:a9:c4:cc:93:76:90: b7:84:ce:33:19:61:ff:64:ea:6a:97:c0:a2:e9:e5:0d:f8:72: b8:c7:ff:b7:b4:9c:c9:a3:a5:55:fd:ee:80:33:31:71:fb:bf: 35:51:c9:6e:32:97:36:a6:4f:b5:4b:0b:68:fa:1d:6f:73:f9: 37:34:9f:5c:1a:c0:25:b8:f2:43:0a:f2:3b:06:b3:13:23:1c: 48:87:c2:56:fc:26:95:1b:45:fd:c1:41:0e:1d:38:e8:62:4e: 6a:be:f7:f4:67:ae:a2:52:a8:0f:91:54:ab:f6:38:4f:2a:ef: fa:c9:a1:8f:c7:39:70:0d:0a:c5:6a:e5:58:af:37:f8:5c:21: 1f:e4:94:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7HodlkrF6L6xc+4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhiMjg3ZjQtNTFjZi00MjFjLTkyM2ItZjBlMzg0ZGU1 ZWVhMB4XDTI2MDgwOTEzMDAxMloXDTI2MTEwNzE0MDAxMlowLzEtMCsGA1UEAxMk YjU3OTIzMDEtMDVjZi00OWVkLTg0NDctNjZjNzA1MTZkNThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbZl2VK/wU4/Vu7BAlWEit+vGWtqpLnBYgLt OLyXVtv47VTcDL4zudPKe6aspYtenJMEQTcuHHgM+wm8LjsgbU175CM4QgF11/3Y P/USvrX9LwyKlfBa+qSoq2hgfrg+5TXa2/KSGfn4uimV5d/xMrf/9JR4lrWbS+IT mkbgGcY1p+TqtGvr8a6xIlVpvdCioO1d9baNxFbdiVoqdJ5Y9oIjXpJueEdJCcvm l2034zKxby/LyL195LQ/B4vc018bpSeUYX9c7sdmZwtmP/lCS5O3Ditab4I59tCu fO9l8Wj+F0TmU3i0tE9Gt79Ieq2H4CD4lx5pBK8NaxWuyUws1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINGVwjjNCIGq5al3t5fj+9JEDsnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82OGIy ODdmNC01MWNmLTQyMWMtOTIzYi1mMGUzODRkZTVlZWEvYjEyMTc1Y2YtMjcwMi0z NzMxLTgzZTgtMTQ5OTZkYWM1NmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjhiMjg3ZjQtNTFjZi00MjFjLTky M2ItZjBlMzg0ZGU1ZWVhLzY4YjI4N2Y0LTUxY2YtNDIxYy05MjNiLWYwZTM4NGRl NWVlYS5jcmwwHwYDVR0jBBgwFoAUNX5PmEElo3ID9eK6QUOuSvrgvB0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS82OGIyODdmNC01MWNmLTQyMWMtOTIzYi1mMGUz ODRkZTVlZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFCHbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbFDyayuI6DBPXU9RBNTwc8cNFDPYlERoLQMH2qRpCyFmvxqpvpHpgw 5ufZr6VZitmCOCMRWDgsdDDVCKPNTYI2eeGUxHRNfV23VZFATrDNRCpa+hrVS7v5 GeVoKVD3H5Uh1QGgXYH6w8yMXbzUzHsJ1vVXQdH1cKnEzJN2kLeEzjMZYf9k6mqX wKLp5Q34crjH/7e0nMmjpVX97oAzMXH7vzVRyW4ylzamT7VLC2j6HW9z+Tc0n1wa wCW48kMK8jsGsxMjHEiHwlb8JpUbRf3BQQ4dOOhiTmq+9/RnrqJSqA+RVKv2OE8q 7/rJoY/HOXANCsVq5VivN/hcIR/klBA= -----END CERTIFICATE-----Generated at Sat Sep 5 06:46:44 2026 by rpki-client